Granted Patent B1

US 12,259,970 · App. 17/656,042 · Granted Mar 25, 2025

Inventors: David Luz Silva (Dublin, IE); Iskander Sanchez Rola (Antibes, FR)

Assignee: GEN DIGITAL INC.

G06F21/554G06F2221/034

Abstract

Claims (62)

1. A computer-implemented method for identifying security threats in smart contract-based services to protect against malicious attacks utilizing off-blockchain resources, at least a portion of the method being performed by one or more computing devices comprising at least one processor, the method comprising:

identifying a reference associated with a transaction on a smart contract-based platform;

detecting, by the one or more computing devices, smart contract source code corresponding to one or more smart contracts associated with the reference on the platform;

extracting, by the one or more computing devices, an identifier from the smart contract source code to locate off-blockchain resources utilized by a smart contract oracle included in the smart contract source code by:

parsing the smart contract source code to identify an address utilized by the smart contract oracle to contact a domain associated with the off-blockchain resources;

mapping the address to a domain contacted by the smart contract oracle; and

extracting the domain;

determining, by the one or more computing devices, potential security threats associated with the off-blockchain resources; and

performing, by the one or more computing devices, a security action that protects against the potential security threats.

2. The computer-implemented method of claim 1 , wherein identifying the reference associated with the transaction on the smart contract-based platform comprises:

detecting a blockchain transaction on the platform;

identifying a transaction destination associated with the blockchain transaction; and

resolving the transaction destination into a blockchain address.

3. The computer-implemented method of claim 1 , wherein detecting the smart contract source code corresponding to the one or more smart contracts associated with the reference on the platform comprises identifying the smart contract source code associated with the reference on the platform.

4. The computer-implemented method of claim 1 , wherein extracting, from the smart contract source code, the identifier to locate the off-blockchain resources utilized by the smart contract oracle comprises:

parsing the smart contract source code to identify a domain associated with the off-blockchain resources that is contacted by the smart contracts; and

extracting the domain.

5. The computer-implemented method of claim 1 , wherein determining the potential security threats associated with the off-blockchain resources comprises performing an evaluation to identify the potential security threats based on at least one domain associated with the off-blockchain resources.

6. The computer-implemented method of claim 5 , wherein performing the evaluation to identify the potential security threats based on the at least one domain associated with the off-blockchain resources comprises evaluating one or more of:

a reputation database for historical data associated with the domain;

a web stack for implementing a website associated with the domain to identify at least one of previously known security vulnerabilities and data leakages;

certificate registration data associated with the domain; or

a domain name registry service to access domain name registration data for the domain.

7. The computer-implemented method of claim 6 , further comprising calculating a risk score based on the evaluation.

8. The computer-implemented method of claim 1 , wherein performing the security action comprises generating a notification identifying the potential security threats associated with the off-blockchain resources.

9. The computer-implemented method of claim 8 , wherein the notification comprises a risk assessment based on one or more security vulnerabilities determined for an off-blockchain resource domain utilized by the smart contracts.

10. A system for identifying security threats in smart contract-based services to protect against malicious attacks utilizing off-blockchain resources, the system comprising:

at least one physical processor;

physical memory comprising computer-executable instructions and one or more modules that, when executed by the physical processor, cause the physical processor to:

identify, by an identification module, a reference associated with a transaction on a smart contract-based platform;

detect, by a detection module, smart contract source code corresponding to one or more smart contracts associated with the reference on the platform;

extract, by an extraction module, an identifier from the smart contract source code to locate off-blockchain resources utilized by a smart contract oracle included in the smart contract source code by:

parsing the smart contract source code to identify an address utilized by the smart contract oracle to contact a domain associated with the off-blockchain resources;

mapping the address to a domain contacted by the smart contract oracle; and

extracting the domain;

determine, by a determining module, potential security threats associated with the off-blockchain resources; and

perform, by a security module, a security action that protects against the potential security threats.

11. The system of claim 10 , wherein the identification module identifies the reference associated with the transaction on the smart contract-based platform by:

detecting a blockchain transaction on the platform;

identifying a transaction destination associated with the blockchain transaction; and

resolving the transaction destination into a blockchain address.

12. The system of claim 10 , wherein the detection module detects the smart contract source code corresponding to the one or more smart contracts associated with the reference on the platform by identifying the smart contract source code associated with the reference on the platform.

13. The system of claim 10 , wherein the extraction module extracts the identifier from the smart contract source code to locate the off-blockchain resources utilized by the smart contract oracle by:

parsing the smart contract source code to identify a domain associated with the off-blockchain resources that is contacted by the smart contracts; and

extracting the domain.

14. The system of claim 10 , wherein the determining module determines the potential security threats associated with the off-blockchain resources comprises by performing an evaluation to identify the potential security threats based on at least one domain associated with the off-blockchain resources.

15. The system of claim 14 , wherein the determining module performs the evaluation to identify the potential security threats based on the at least one domain associated with the off-blockchain resources by evaluating one or more of:

a reputation database for historical data associated with the domain;

a web stack for implementing a website associated with the domain to identify at least one of previously known security vulnerabilities and data leakages;

certificate registration data associated with the domain; or

a domain name registry service to access domain name registration data for the domain.

16. The system of claim 15 , wherein the determining module further performs the evaluation to identify the potential security threats based on the at least one domain associated with the off-blockchain resources by calculating a risk score.

17. The system of claim 10 , wherein the security module performs the security action by generating a notification identifying the potential security threats associated with the off-blockchain resources.

18. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

identify a reference associated with a transaction on a smart contract-based platform;

detect smart contract source code corresponding to one or more smart contracts associated with the reference on the platform;

extract an identifier from the smart contract source code to locate off-blockchain resources utilized by a smart contract oracle included in the smart contract source code by:

parsing the smart contract source code to identify an address utilized by the smart contract oracle to contact a domain associated with the off-blockchain resources;

mapping the address to a domain contacted by the smart contract oracle; and

extracting the domain;

determine potential security threats associated with the off-blockchain resources; and

perform a security action that protects against the potential security threats.

Assignments (2)

References Cited (33)